91 lines
		
	
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			91 lines
		
	
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
/**
 | 
						|
 * @file mod/removeme.php
 | 
						|
 */
 | 
						|
 | 
						|
use Friendica\App;
 | 
						|
use Friendica\Core\Config;
 | 
						|
use Friendica\Core\Renderer;
 | 
						|
use Friendica\Database\DBA;
 | 
						|
use Friendica\DI;
 | 
						|
use Friendica\Model\User;
 | 
						|
use Friendica\Util\Strings;
 | 
						|
 | 
						|
function removeme_post(App $a)
 | 
						|
{
 | 
						|
	if (!local_user()) {
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	if (!empty($_SESSION['submanage'])) {
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	if (empty($_POST['qxz_password'])) {
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	if (empty($_POST['verify'])) {
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	if ($_POST['verify'] !== $_SESSION['remove_account_verify']) {
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	// send notification to admins so that they can clean um the backups
 | 
						|
	// send email to admins
 | 
						|
	$admin_mails = explode(",", str_replace(" ", "", DI::config()->get('config', 'admin_email')));
 | 
						|
	foreach ($admin_mails as $mail) {
 | 
						|
		$admin = DBA::selectFirst('user', ['uid', 'language', 'email', 'username'], ['email' => $mail]);
 | 
						|
		if (!DBA::isResult($admin)) {
 | 
						|
			continue;
 | 
						|
		}
 | 
						|
		notification([
 | 
						|
			'type'         => SYSTEM_EMAIL,
 | 
						|
			'subject'      => DI::l10n()->t('[Friendica System Notify]') . ' ' . DI::l10n()->t('User deleted their account'),
 | 
						|
			'preamble'     => DI::l10n()->t('On your Friendica node an user deleted their account. Please ensure that their data is removed from the backups.'),
 | 
						|
			'body'         => DI::l10n()->t('The user id is %d', local_user()),
 | 
						|
			'to_email'     => $admin['email'],
 | 
						|
			'to_name'      => $admin['username'],
 | 
						|
			'uid'          => $admin['uid'],
 | 
						|
			'language'     => $admin['language'] ? $admin['language'] : 'en',
 | 
						|
			'show_in_notification_page' => false
 | 
						|
		]);
 | 
						|
	}
 | 
						|
 | 
						|
	if (User::getIdFromPasswordAuthentication($a->user, trim($_POST['qxz_password']))) {
 | 
						|
		User::remove($a->user['uid']);
 | 
						|
 | 
						|
		unset($_SESSION['authenticated']);
 | 
						|
		unset($_SESSION['uid']);
 | 
						|
		DI::baseUrl()->redirect();
 | 
						|
		// NOTREACHED
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
function removeme_content(App $a)
 | 
						|
{
 | 
						|
	if (!local_user()) {
 | 
						|
		DI::baseUrl()->redirect();
 | 
						|
	}
 | 
						|
 | 
						|
	$hash = Strings::getRandomHex();
 | 
						|
 | 
						|
	require_once("mod/settings.php");
 | 
						|
	settings_init($a);
 | 
						|
 | 
						|
	$_SESSION['remove_account_verify'] = $hash;
 | 
						|
 | 
						|
	$tpl = Renderer::getMarkupTemplate('removeme.tpl');
 | 
						|
	$o = Renderer::replaceMacros($tpl, [
 | 
						|
		'$basedir' => DI::baseUrl()->get(),
 | 
						|
		'$hash' => $hash,
 | 
						|
		'$title' => DI::l10n()->t('Remove My Account'),
 | 
						|
		'$desc' => DI::l10n()->t('This will completely remove your account. Once this has been done it is not recoverable.'),
 | 
						|
		'$passwd' => DI::l10n()->t('Please enter your password for verification:'),
 | 
						|
		'$submit' => DI::l10n()->t('Remove My Account')
 | 
						|
	]);
 | 
						|
 | 
						|
	return $o;
 | 
						|
}
 |